[Snort-users] acid graphing

Basil Saragoza snortlst at ...125...
Fri Mar 1 09:32:26 EST 2002


Here is the info:

1. "I'll assume the obvious that there are alerts in this alert group which
actually have events on this particular date range." - double-checked that,
yes, alerts are in this range.
2. Set the following:
debug_mode=1 in acid_conf.php

error_reporting = E_ALL
display_errors = On
display_startup_errors = On
log_errors = On
(in php.ini)

error_log I set to /var/log/acid/acid.log - nothing is logged there, but I
do have entries in error_log in apache directory.

Web server (apache) was restarted

(Errors that I see in error_log in apache duplicate the errors that are
diplayed on the web pages of acid, besides "PHP Warning: Undefined offset
<number>
in /usr/local/www/htdocs/phplot/phplot.php on line 1571" (and the same
regarding the line 814)
line 814 looks like this in phplot.php:
$mini = $this->data_values (0) (2);
line 1571 looks like this in phplot.php:
$xlab = $this->data_values ($x_tmp) (0);


3. Here are the info from the web page when I browse acid_main.php
Warning: Cannot send session cache limiter - headers already sent (output
started at /usr/local/www/htdocs/acid/acid_conf.php:236) in
/usr/local/www/htdocs/acid/acid_state_common.inc on line 92
Session Registered
History depth = 1

         URL: '/acid/acid_main.php' (referred by: '')
         PARAMETERS: ''
         CLIENT: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
         SERVER: Apache/1.3.22 (Unix) PHP/4.1.1 mod_ssl/2.8.5 OpenSSL/0.9.6b
         SERVER HW: Linux sno1 2.4.7-10 #1 Thu Sep 6 17:27:27 EDT 2001 i686
unknown
         DATABASE TYPE: mysql  DB ABSTRACTION VERSION:
         PHP VERSION: 4.1.1  PHP API: apache
         SESSION ID: 67c88118f36c2253e937d1bedab7c30e( 18668 bytes )

Checking for DB abstraction lib in
'/usr/local/www/htdocs/adodb/adodb.inc.php'
sensor #1: event.cid = 15255, acid_event.cid = 15255
Added 0 alert(s) to the Alert cache
Queried on : Fri March 01, 2002 12:15:21
Database: snort at ...274...:3306    (schema version: 104)
Time window: [2002-02-20 14:14:32] - [2002-03-01 12:14:35]

4. Here is the info from the web page when I access graphs page:

Warning: Cannot send session cache limiter - headers already sent (output
started at /usr/local/www/htdocs/acid/acid_conf.php:236) in
/usr/local/www/htdocs/acid/acid_state_common.inc on line 92
Session Registered
History depth = 2


         URL: '/acid/acid_graph_main.php' (referred by:
'https://216.123.170.134/acid/acid_main.php')
         PARAMETERS: ''
         CLIENT: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
         SERVER: Apache/1.3.22 (Unix) PHP/4.1.1 mod_ssl/2.8.5 OpenSSL/0.9.6b
         SERVER HW: Linux sno1 2.4.7-10 #1 Thu Sep 6 17:27:27 EDT 2001 i686
unknown
         DATABASE TYPE: mysql  DB ABSTRACTION VERSION:
         PHP VERSION: 4.1.1  PHP API: apache
         SESSION ID: 67c88118f36c2253e937d1bedab7c30e( 28030 bytes )

Checking for DB abstraction lib in
'/usr/local/www/htdocs/adodb/adodb.inc.php'
sensor #1: event.cid = 15264, acid_event.cid = 15255
Added 9 alert(s) to the Alert cache

5. Here is the info from the web page when I try to generate the graph:

Warning: Cannot send session cache limiter - headers already sent (output
started at /usr/local/www/htdocs/acid/acid_conf.php:236) in
/usr/local/www/htdocs/acid/acid_state_common.inc on line 92
Session Registered
History depth = 3
URL: '/acid/acid_graph_main.php' (referred by:
'https://216.123.170.134/acid/acid_graph_main.php')
         PARAMETERS: ''
         CLIENT: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
         SERVER: Apache/1.3.22 (Unix) PHP/4.1.1 mod_ssl/2.8.5 OpenSSL/0.9.6b
         SERVER HW: Linux sno1 2.4.7-10 #1 Thu Sep 6 17:27:27 EDT 2001 i686
unknown
         DATABASE TYPE: mysql  DB ABSTRACTION VERSION:
         PHP VERSION: 4.1.1  PHP API: apache
         SESSION ID: 67c88118f36c2253e937d1bedab7c30e( 37392 bytes )
         Checking for DB abstraction lib in
'/usr/local/www/htdocs/adodb/adodb.inc.php'
sensor #1: event.cid = 15237, acid_event.cid = 15232
Added 5 alert(s) to the Alert cache

Chart criteria
Array
(
    [0] => LEFT JOIN acid_ag_alert ON (acid_event.sid=acid_ag_alert.ag_sid
AND acid_event.cid=acid_ag_alert.ag_cid)
    [1] => ag_id = 2 AND (  UNIX_TIMESTAMP(timestamp) >=
UNIX_TIMESTAMP('2002-02-21 010000')      AND  UNIX_TIMESTAMP(timestamp) <=
UNIX_TIMESTAMP('2002-02-28 000000')       )
)

chart_type = 1
data_source = 2
year_start year_end month_start month_end day_start day_end hour_start
hour_end
2002 2002 02 02 21 28 0 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH


There are thousands of entries like that - if you need I van send them





----- Original Message -----
From: "Roman Danyliw" <roman at ...438...>
To: "Basil Saragoza" <snortlst at ...125...>
Cc: <snort-users at lists.sourceforge.net>
Sent: Friday, March 01, 2002 10:13 AM
Subject: Re: [Snort-users] acid graphing


> > How do I set debug_mode=1 and where do I look for debugging info?
>
> http://acidlab.sourceforge.net/acid_faq.html#faq_d5
>
> > Chart Begin: 1-27-February-2002
> > Chart End: 23-28-February 2002
>
> I'll assume the obvious that there are alerts in this alert group which
actually
> have events on this particular date range.
>
> Roman
>
> On Fri, 1 Mar 2002 09:45:54 -0500, "Basil Saragoza" <snortlst at ...125...>
wrote
> :
>
> > O.K As I mentioned before  I created the 'Alerts' AG and then assigned
12500
> > alerts to it.Then I go to the Graph Alert Data page and choose the
> > following:
> > Chart type: Time (hour) vs. number of alerts.
> > Chart Period: No period (Choosing other parameters doesn't help either)
> > Chart type: Bar (choosinf other parameters doesn't help)
> > Chart Begin: 1-27-February-2002
> > Chart End: 23-28-February 2002
> > Data Source: AG that I created and populated ('Alerts')
> >
> > How do I set debug_mode=1 and where do I look for debugging info?
> >
> > thx.
> > ----- Original Message -----
> > From: "Roman Danyliw" <roman at ...438...>
> > To: "Basil Saragoza" <snortlst at ...125...>
> > Cc: <snort-users at lists.sourceforge.net>
> > Sent: Thursday, February 28, 2002 5:15 PM
> > Subject: Re: [Snort-users] acid graphing
> >
> >
> > > Can we have some more details:
> > >
> > > - what kind of graph are you trying to make (exact parameters)?
> > > - can you run this operation with debug_mode=1 (does this provide any
more
> > > info?)
> > >
> > > Roman
> > >
> > > On Thu, 28 Feb 2002 12:56:53 -0500, "Basil Saragoza"
> > <snortlst at ...125...>
> > > wrote :
> > >
> > > > Please ignore previous message.Error messaeg that I see know is:
> > > > No data points to plot
> > > > ----- Original Message -----
> > > > From: "Scott Fringer" <fringsm at ...5133...>
> > > > To: "Basil Saragoza" <snortlst at ...125...>
> > > > Cc: <snort-users at lists.sourceforge.net>
> > > > Sent: Thursday, February 28, 2002 11:49 AM
> > > > Subject: Re: [Snort-users] acid graphing
> > > >
> > > >
> > > > > Basil,
> > > > >   You have defined no Alert Groups in the Alert Group Maintenance
> > page.
> > > > > You need to create a group to assign alerts to, and then select
that
> > group
> > > > > to get graphs.
> > > > >
> > > > > Scott
> > > > >
> > > > > Scott Fringer                              Shands Healthcare @
U.F.
> > > > > Network Systems Analyst                        Gainesville, FL
> > > > >
> > > > > On Thu, 28 Feb 2002, Basil Saragoza wrote:
> > > > >
> > > > > > When I try to see graphs on acid (v. b20) the get the following
> > error
> > > > > > message:
> > > > > > No AG was specified. Using all alerts.
> > > > > > And no graphs are displayed.
> > > > > > when I open Data source AG drop-down menu I don't see any
choices...
> > > > > >
> > > > > > Things I checked:
> > > > > > 1. php was compiled with gd
> > > > > > 2. pages examples/test_setup.php displayes correctly two
charts -
> > png
> > > > and
> > > > > > jpg
> > > > > > 3. valid chart file format(png) is specifoed in
$chart_file_format
> > > > > >
> > > > > > Any ideas?
> > > > > >
> > > > > > _______________________________________________
> > > > > > Snort-users mailing list
> > > > > > Snort-users at lists.sourceforge.net
> > > > > > Go to this URL to change user options or unsubscribe:
> > > > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > > > > Snort-users list archive:
> > > > > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > > > > >
> > > > >
> > > > >
> > > >
> > > > _______________________________________________
> > > > Snort-users mailing list
> > > > Snort-users at lists.sourceforge.net
> > > > Go to this URL to change user options or unsubscribe:
> > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > > Snort-users list archive:
> > > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > > >
> > > >
> > > >
> > > >
> > >
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users at lists.sourceforge.net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >
> >
> >
> >
> >
>




More information about the Snort-users mailing list